Improper Permission Checks in Lobster_pro Affect Multiple Versions
CVE-2026-3322

5.6MEDIUM

Key Information:

Vendor

Lobster Data Gmbh

Status
Lobster Pro
Vendor
CVE Published:
26 October 2026

What is CVE-2026-3322?

Lobster_pro is vulnerable due to improper permission checks that allow unauthorized access to certain endpoints. Attackers can exploit this flaw to interact with functions meant solely for administrative users, thus compromising the security of the application. This vulnerability affects Lobster_pro version 4.12.12-LTS and all prior versions until 25.1.3. Organizations using these versions should address this issue promptly to safeguard their systems.

Affected Version(s)

Lobster_pro 4.12.12-LTS

Lobster_pro 25.1.3

References

https://www.schutzwerk.com/en/blog/schutzwerk-sa-2025-002/

CVSS V4

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel Marner of SCHUTZWERK GmbH
.